You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Checkly CLI is using pin versions, as a library, this leads to the problems described in resend/react-email#2026 on the consumer side. Suggestions would be:
(easier) Unpin the dependencies and use caret range instead.
(better) If pin versions is necessary, decouple the code imported by the consumers to a separate library, minimize the dependencies and use caret ranges there, then ask the consumers to import the new library instead. As for the CLI use cases (CI/CD for example), ask the consumers to install the CLI separately instead of adding it to package.json, so that its dependencies won't interfere with the consumers' dependencies.
The text was updated successfully, but these errors were encountered:
Node.js version
22.14.0
NPM version
pnpm 10.7.0
@checkly/cli version
5.1.0
Steps to reproduce
Checkly CLI uses axios 1.74, which is subjected to GHSA-jr5f-v2jv-69x6
What is expected?
Axios >= 1.8.2
What is actually happening?
Axios == 1.7.4
Any additional comments?
Checkly CLI is using pin versions, as a library, this leads to the problems described in resend/react-email#2026 on the consumer side. Suggestions would be:
package.json
, so that its dependencies won't interfere with the consumers' dependencies.The text was updated successfully, but these errors were encountered: